Name: The Advantages of Integrating Holistic EDR and Incident Response
Start: 2024-06-12T19:00:00Z
End: 2024-06-12T19:00:32.000Z
Location: BrightTALK
Rating: 5

The First Security AI Platform to Protect the Entire Enterprise.
Protect your organization from any threat with the world’s most advanced AI-powered cybersecurity platform. With SentinelOne, you can secure tomorrow.

At SentinelOne, we create autonomous technology solutions that think for themselves. Intelligent, data-driven systems that learn as they are challenged and evolve on their own—making human lives better and the world more secure.

SentinelOne's AI & Cloud Security Evangelist, Chris Hosking, has been studying and analyzing the intricate world of cyber threats. In his upcoming expert session, you’ll hear a breakdown of recent findings. 

Chris will explore the critical connections and stark contrasts between the attack methodologies and evolving threat tactics employed by sophisticated nation-state adversaries and prolific e-crime threat actors. 

Through the lens of real-world attack scenarios, gain an understanding of this increasingly tangled community with mixed goals.  We will also confront the inherent complexities of attribution in the modern cyber landscape, exploring why definitively identifying the perpetrator behind an attack remains one of the most challenging aspects of cybersecurity. 

Hear new insights on:
The connections and contrasts in attack methodologies and threat tactics.
Analysis of real-world attacks to illustrate key differences.
The inherent difficulties and challenges in attributing cyber attacks.

Gain invaluable insights into how these diverse threat actors operate and arm yourself with the knowledge to better defend against their persistent campaigns

Threat Actors Unveiled: Nation State versus Cyber Crime

Are escalating Splunk costs holding your security team hostage? 

In this webinar, we'll expose the hidden drains of traditional data lakes and reveal how SentinelOne's AI SIEM offers a revolutionary path forward. Discover how you can eliminate tiered storage and slow data rehydration entirely, gaining instant, "hot" access ensuring no data is ever left behind. 
The best part? You can achieve all this without ripping and replacing your existing Splunk workflows or dashboards; instead, you'll augment them for unparalleled insights and efficiency, even querying data stored in our Data Lake directly from Splunk.

Ready to transform your security operations and reduce costs? Join us to uncover the details and see how SentinelOne can empower your team to secure tomorrow - for less.

Tame Splunk Costs While Boosting Threat Detection with AI SIEM

Dans un monde cloud-native en accélération, sécuriser les environnements multi-cloud exige plus que de la visibilité : il faut de la prédictibilité, de l’automatisation et une posture résolument proactive.

Découvrez comment SentinelOne repense la sécurité cloud avec notre CNAPP de nouvelle génération, combinant la puissance d’un Offensive Security Engine capable d’émuler les tactiques adverses à grande échelle, et des capacités d’hyperautomatisation pour orchestrer les réponses, la remédiation et la gouvernance sans friction.

Au cours de cette session, vous verrez comment la plateforme permet non seulement de détecter des expositions critiques avant qu’elles ne soient exploitées, mais aussi de répondre avec une vélocité qui dépasse les capacités humaines.

Sécuriser le cloud : moteur offensif et hyperautomatisation pour une approche proactive du CNAPP

A conversation with SentinelLabs Senior Threat Researcher, Jim Walter, on the rise and evolution of DragonForce, based on the firsthand intelligence behind the report. This session uncovers exclusive threat intelligence from the SentinelLabs team, detailing the group’s tactics, recent campaigns, and what their continued activity means for organizations today. Direct from the expert who’s been tracking them since day one.

You'll get:
-The most critical findings from our DragonForce report
-What makes this group different—and more dangerous
-Real-world examples from tracked campaigns
-What their evolution means for your defenses

DragonForce Exposed – Raw Intel from the Front Lines

Join SentinelOne's expert security researchers in an insightful webinar that explores the evolving landscape of cyber threats targeting Cloud and AI environments. As organizations rapidly adopt and build with cloud services and AI, new vulnerabilities and attack vectors continue to emerge, posing significant risks to data security and operational continuity.
In this session, SentinelOne researchers will share their latest findings on real-world threats. Discover the tactics, techniques, and procedures (TTPs) used by adversaries, and gain actionable strategies to fortify your defenses.

Cloud Attack and Defend: Emerging Threats

Expanding your cloud footprint brings scalability and speed, but also creates hurdles in protection, stakeholder alignment, and siloed data sources. A new approach to cloud security - one that expands beyond the cloud itself - is needed to ensure that businesses have the visibility and insights they need to effectively detect, investigate, and respond to threats.  

In this webinar, you’ll see an end-to-end live demo of our next evolution of AI-powered CNAPP: SentinelOne Singularity Cloud Security. The presentation will showcase how Singularity Cloud Security aligns DevOps, IT, and Security teams to tangibly reduce their cloud attack surface.

SentinelOne-A New Unified Approach to Cloud Security

Join our upcoming discussion with ethical hacker “FC” and cybersecurity leader Ely Kahn as they discuss first-hand examples of how attackers are using AI and how security teams can leverage generative AI tools to fight back. 

FC is a renowned ethical hacker and social engineer, as well as global keynote speaker. When he is not legally breaking into companies, FC takes audiences on an eye-opening journey into the hacker’s mindset. 

In this conversion you’ll hear:
Examples of AI threats being used by attackers
The tactics used by Red Teams and how Blue Teams can respond now using Purple Teaming (Red and Blue together) to optimize cyber defenses
Insights on using AI to analyze threat intelligence to learn from past attacks to improve defenses.

Join this insightful discussion with two top experts!

Red Team, Blue Team, Purple Team: The Ultimate Defense Strategy

Security Information and Event Management (SIEM) systems have long been the cornerstone of enterprise security, helping organizations collect, analyze, and respond to security incidents. However, traditional SIEM solutions often struggle to keep up with the sheer volume and complexity of modern cyber threats. Artificial intelligence (AI) is a transformative force that is revolutionizing the way SIEM systems operate. By automating analysis, enhancing detection, and enabling proactive threat hunting, AI has become the catalyst for a new era of cybersecurity.

How far can we leverage AI to push the unification of operations, hunting, and response? Will security operations ever be fully autonomous?

Let’s explore what it means to integrate AI-driven capabilities at every level of security operations.

AI-Powered SIEM | Unifying Operations, Hunting, and Response

From automated ticketing and response to accelerated alert enrichment and investigation, Singularity Hyperautomation enhances endpoint security with a built-in, no-code automation solution to improve analyst productivity and increase efficiency.

Join us to learn how combining industry-leading endpoint protection and hyperautomation can enhance the Security Operations Center. 

What you’ll learn in this demonstration: 
Practical hyperautomation use cases for endpoint security
How to easily create an endpoint workflow from start to finish
Steps to implement scalable automation in your SOC

SentinelOne-From Alert to Action: Enhance Endpoint Security with Automation

Attackers are wielding AI-driven strategies to outpace traditional defenses, launching hyper-targeted, automated, and adaptive attacks at an unprecedented scale. As adversaries grow more sophisticated, leveraging generative AI to evade detection and deploy malicious payloads in real time, security teams are left scrambling to keep up. It’s time to fight fire with fire.

Join us for an exclusive webinar exploring how AI-powered autonomous defense is revolutionizing cybersecurity. Discover how modern Security Operations Centers (SOCs) are shifting from reactive, manual processes to self-defending, AI-driven systems capable of detecting, analyzing, and neutralizing threats at machine speed.

- The challenges security teams face in an AI-driven threat landscape
- How AI is weaponizing both attack and defense strategies
- Why Autonomous SOCs are the future of cybersecurity resilience
- Real-world applications of AI-powered protection in action

Don't miss this opportunity to gain insights from cybersecurity expert Albert Caballero on how organizations can turn the tide against cyber adversaries with SentinelOne’s cutting-edge autonomous defenses.

The Cybersecurity AI Arms Race | Winning with Autonomous Defense

In today’s rapidly evolving threat landscape, maintaining a strong security posture is crucial for ensuring business continuity. However, closing the gap between strategy, people, processes, and disparate technologies across the organization to achieve your desired outcomes is easier said than done. 

Fortunately, with the right service and platform, your organization can become proactive instead of reactive and take your security strategy to the next level. During this session led by Dave Gruber, Principal Cybersecurity Analyst at Enterprise Strategy Group, you’ll find out how integrated managed detection and response (MDR) can enable your business to take immediate action against detected threats and reduce your window of exposure.

You'll also learn how AI is enabling organizations and MDR service providers to detect threats across the entire connected security ecosystem, ensuring accuracy and speed. Tune in now to discover the potential of MDR for your organization.

Leveraging AI and Integrated MDR to Enhance Threat Detection and Response

AI is here to stay and will increasingly become a standard component in the workplace. As part of the 'The 2025 Threatscape' Summit, Enterprise Strategy Group and SentinelOne are hosting this fireside chat on the benefits and challenges AI will bring to cybersecurity and will explore strategies on how you can navigate the evolving AI security landscape.

The session will cover:
• AI’s Evolution in Cybersecurity: How AI has rapidly advanced from early machine learning use cases to powerful deep learning, LLMs, and generative AI, creating a new arms race in threat detection
• AI-SIEM: How you can leverage cloud-native data lakes and generative AI to enhance detection speed, reduce remediation times, and bridge the cybersecurity skills gap
• AI in Threat Hunting: How AI is revolutionizing threat hunting through advanced pattern recognition and hyperautomation, enabling security teams to detect even the most evasive threat tactics
• AI-Powered Security in Hybrid and Multi-Cloud Environments: AI technologies provide a unified security approach across hybrid and multi-cloud environments, supporting a shared responsibility model between providers and users

Don’t miss your chance to learn how to navigate AI challenges in cybersecurity.

Navigating AI in Cybersecurity: The 2025 Threatscape

Join us for a frank, expert discussion between Alex Stamos, Adriana Corona, and Ely Kahn as they:

Discuss the practical implications of emerging AI technologies on cybersecurity;
Provide guidance for CISOs on AI Risk Management; and
Present the most in-depth overview of Purple AI to date, including new game-changing announcements! 


Mark your calendars and don't miss the chance to hear from these industry experts and to get an exclusive demonstration of how Purple AI streamlines threat hunting and accelerates the SOC, all in natural language.

CTA>> SAVE MY SPOT

If you're ready to integrate the power of generative AI into your package, simply request your designated representative HERE.

Purple AI GA: Detect Earlier, Respond Faster, & Stay Ahead of Attacks

How can AI change a Security Analyst's workflow? Ashish, CISO & Host of AI CyberSecurity Podcast, and Caleb Sima, Chair of CSA AI Security Alliance & Co-Host of AI Cybersecurity Podcast, catch up with Ely Kahn, VP of Product at SentinelOne, to discuss the revolutionary impact of generative AI on cybersecurity. Ely will speak about the challenges and solutions in integrating AI into cybersecurity operations, highlighting how to simplify complex processes and empower junior to mid-tier analysts.

How AI Can Be Used in Cybersecurity Operations

77% of organizations experienced a cloud data breach in 2022. Cloud security is broken and outdated, with traditional solutions offering siloed capabilities with inefficient security outcomes.

That’s why SentinelOne has produced the world’s first CNAPP powered by attacker’s intelligence. Unlike other solutions that only list all theoretically exploitable alerts, SentinelOne Cloud Native Security provides proof of exploitability with every vulnerability to save time spent by security teams on validation and prioritization of alerts. Moving beyond the theoretical risk and delivering Verified Exploit Paths™.

Join us as we unveil the capabilities of this revolutionary CNAPP solution with a unique Offensive Security Engine:

Instant Visibility: Gain contextual insights across multi-cloud environments, identifying misconfigurations and vulnerabilities in real time.
Attacker's Mindset: Stay one step ahead with a prioritized set of evidence-based insights, empowering proactive defense strategies.
Verified Exploit Paths™: Move beyond theoretical attack scenarios with verified paths, enabling focused mitigation efforts where they matter most.


SAVE MY SPOT >>

60% of worldwide corporate data is being stored in the cloud. Attackers are targeting this data with rapid and coordinated threat campaigns. 





Sincerely,
The SentinelOne Team

New Innovations in AI-powered Cloud Security from SentinelOne

Murky and cryptic details of cloud breaches and threats fill all cybersecurity news. Sorting through the limited information provided can often lead to even more confusion around the source and solution to these threats. 

To build an effective cloud defense strategy, it is important to understand the nature of how you will be attacked.  

In this live session, we will provide an in-depth look at the changing cloud threat landscape.

We will discuss:
How cloud breaches have evolved to where they are today. 
Real techniques and tactics that can be used in defense
The latest trends of threat actors

Evolution of Cloud Security Breaches: Building Cloud Defense

Generative AI is headlining the news cycle, but what are the best ways to generate AI-powered security insights? Furthermore, how do you use these insights to detect earlier and respond faster to threats? 

Join Amazon’s Jonathan Nguyen, and SentinelOne’s Ely Kahn to learn how collaboration and innovation in generative AI fortifies the protection of businesses against current and future threats.
This technical webinar will explore how to use AWS native services, such as Amazon Sagemaker, Amazon Security Lake, and Amazon Bedrock to generate AI-powered security insights. We will explore the use case of SentinelOne Purple AI, and how it leverages cutting-edge technologies to redefine cybersecurity threat hunting, analysis, and response. Our experts will discuss the benefits and costs, as well as the potential challenges of building something from scratch vs. buying a generative AI security solution.
Tune in for:
How to use AWS-native services to generate AI-powered insights as well as an alternative solution
A cost/benefit analysis of building something from scratch vs. buying a generative AI security solution.
A demonstration of generative AI security solution use cases 
Don't miss this opportunity to gain insights into the future of AI-driven cybersecurity and how AWS and SentinelOne are at the forefront of this revolution.

How to Create Generative AI Security Insights Using Native AWS Services

In the discussion, Sean Heide, Research Technical Director of Cloud Security Alliance, will cover the last Top Threats to Cloud Computing report by the Cloud Security Alliance. This document, though not a framework in a traditional sense, is a powerful research paper that outlines the cloud's top risk and threat areas as identified by the entire security community. Through extensive research and collaboration, these findings have been stripped down to be able to describe business impacts, mitigations, and lessons learned from use cases. Whether you are a seasoned veteran in this business, or just getting started on your cloud journey, you will be able to use these findings to begin to put the pieces together to enhance your security posture.

Navigating the Top Cloud Threats: A Practical Approach for Risk Identification

As we improve our defenses, the threat actors step up their game to cause more harm. We will take a practical approach and examine emerging threats from the Dark Web that aim to breach our defenses. 

Using practical examples, we will study these threats and discuss steps that you should be taking to prevent these cyber-attacks.

What to expect:
1. Introduction – Emerging Threats 2024
2. Ransomware Evolution
      - Less encryption, more exfiltration
      - Detection of data leaks
      - Testing for Ransomware attacks
3. Breaches in Cloud and Supply Chain
      - Know your data
      - Extend your perimeter
4. Addressing a Threat
5. Show ROI on Threat Detection and Prevention

Threat Intelligence: The Dark Side of Threat Detection

Tune into this talk to learn about the integration of Artificial Intelligence (AI) into endpoint detection and response (EDR) systems, focusing on the application of AI-driven behavioral profiling to identify malicious activities. Industry thought leader John Bambenek will delve into the mechanisms by which AI models discern typical from atypical user behaviors, thus enhancing threat detection capabilities. The discussion also will cover the benefits of this holistic approach, including improved detection accuracy and faster response times. Practical case studies will demonstrate the effectiveness of AI behavioral profiling in real-world scenarios, underscoring its significance in the development of robust cybersecurity frameworks.

Enhancing EDR: A Holistic AI-Based Behavioral Profiling Approach

The key to robust defense lies in adopting a holistic security approach, with full visibility and context across all vectors including endpoints, identities, and cloud.

Join SentinelOne for a webinar as we outline strategies for how to comprehensively detect, prioritize, and prevent threats including: 

• Unified data access on a single AI-powered platform 
• Simplified, unified security agent management across the enterprise
• Use of behavioral AI to detect anomalies and potential threats based on patterns and behaviors
• Multi-event correlation and context to understand the relationships amongst agents and assets 
• How advanced Generative AI can augment and expedite threat hunting, investigations, and response

This webinar will delve into how SentinelOne's unified platform and advanced technologies empower organizations to not only detect and respond to threats, but also to augment their human analysts with AI-driven insights and support.

Advanced Defense:  SentinelOne's Partnerships Elevate Cyber Defense

Endpoint protection has been around for decades and is not disappearing anytime soon. While the key requirement of any solution is efficacy (effectiveness in detecting threats), there are many other aspects that should be part of your endpoint solution evaluation and selection process. 

Tune into this presentation from industry thought leader Kevin Tolly who will introduce the audience to three important aspects to consider: 
- Resource utilization.
- Online vs. offline efficacy.
- Hybrid detect/respond solutions. 

Some solutions can consume much or all of the endpoint’s CPU during scans leading to potential degradation of the endpoint’s overall performance. Some solutions are not as effective when they are offline and can’t access their cloud-based threat databases. This can be important for operations-oriented computers that are deliberately disconnected from the Internet. We are also seeing a split between detection and remediation with some solutions consisting of two vendors specializing in each area. These vendors claim that improved detection justifies the split solution. 

Tune in to dive more into these points and see Kevin Tolly present vendor-neutral test data from actual test to demonstrate the differences across some current generation solutions. 

About The Tolly Group
The Tolly Group is an authoritative international testing organization based in Boca Raton, Florida. The Tolly Group has been providing third-party validation of IT products and solutions since 1989.

Next-Gen Endpoint Security: Efficiency, Efficacy, and Hybrid Protection

A Holistic Approach to Endpoint Detection and Response

Endpoint detection and response (EDR) tools have evolved into excellent resources for fighting advanced threats, responding to incidents on network endpoints, enhancing remediation efforts, and improving device behavior visibility—when properly integrated into incident response (IR) processes.

This Fireside Chat with SentinelOne, a session in BrightTALK’s upcoming “A Holistic Approach to Endpoint Detection and Response” Summit, will demonstrate in full how to establish a holistic, unified EDR/XDR and IR strategy in your company. 

Register for your spot or watch the on-demand recording for indispensable insights from CIO Mentor and Advisor Simon Ratcliffe, VP of Managed Detection & Response, Warwick Webb, and Product Leader, Braden Preston: 

1. How to obtain a single data lake with full visibility
2. Why unified access management, the security operations center, hyperautomation, and a single security console are essential in crafting a holistic security strategy
3. Benefits of, and strategies for, accelerating threat hunting, investigations, and response 
4. And how XDR and IR work together for a unified approach.

The Advantages of Integrating Holistic EDR and Incident Response

Access Management

Security Strategy

Incident Response

Endpoint Security

Threat Detection

Threat Assessment

Network Security

Endpoint Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

The Advantages of Integrating Holistic EDR and Incident Response

Presented by

About this talk

SentinelOne